Description
Heap-based buffer overflow in the cgiCompileSearch function in CUPS 1.3.5, and other versions including the version bundled with Apple Mac OS X 10.5.2, when printer sharing is enabled, allows remote attackers to execute arbitrary code via crafted search expressions.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | cups | 1.3.6-3 | — |
| Debian 13 | cups | 1.3.6-3 | — |
| Debian 12 | cups | 1.3.6-3 | — |
| Debian 4.0 | cupsys | 1.2.7-4etch3 | DSA-1530-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | cups +3 | 1:1.2.4-11.14.el5_1.6 | RHSA-2008:0192 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | cups | 2.3.3op2-4.2 | openSUSE-SU-2024:10707-1 |
Advisories 3
- RHSA-2008:0192 Red Hat Security Advisory: cups security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1530-1 cupsys - multiple vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:10707-1 cups-2.3.3op2-4.2 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- 29485 third-party-advisory
- SUSE-SA:2008:015 vendor-advisory
- 29573 third-party-advisory
- ADV-2008-0921 vdb-entry
- TA08-079A third-party-advisory
- 1019646 vdb-entry
- ADV-2008-0924 vdb-entry
- FEDORA-2008-2131 vendor-advisory
- USN-598-1 vendor-advisory
- MDVSA-2008:081 vendor-advisory
- 29420 third-party-advisory
- APPLE-SA-2008-03-18 vendor-advisory
- 28307 vdb-entry
- oval:org.mitre.oval:def:10085 vdb-entry signature
- 29750 third-party-advisory
- 29448 third-party-advisory
- FEDORA-2008-2897 vendor-advisory
- 29634 third-party-advisory
- 29655 third-party-advisory
- http://docs.info.apple.com/article.html?artnum=307562
- 29431 third-party-advisory
- 20080318 Multiple Vendor CUPS CGI Heap Overflow Vulnerability third-party-advisory
- DSA-1530 vendor-advisory
- RHSA-2008:0192 vendor-advisory
- GLSA-200804-01 vendor-advisory
- 29603 third-party-advisory